Vulnerabilities

TI-2022-10373 CVE-2022-27257 · GHSA-7p22-9f27-w6fq

A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before…

LOW 35

A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01285 Published 2022-04-15 No fix listed

TI-2022-10374 CVE-2022-27258 · GHSA-qx2r-h2pf-6vgp

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows…

LOW 29

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00733 Published 2022-04-15 No fix listed CWE-79

TI-2022-10372 CVE-2022-27256 · GHSA-hvpp-qrxv-c9g3

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before…

LOW 30

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01488 Published 2022-04-13 No fix listed CWE-601

Vulnerabilities

Filters

A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before…

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows…

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before…